Vulnerabilities > CVE-2021-40385 - Unspecified vulnerability in Kaseya Unitrends Backup Software

047910
CVSS 9.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
kaseya
critical

Summary

An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is a privilege escalation from read-only user to admin.

Vulnerable Configurations

Part Description Count
Application
Kaseya
1